last executing test programs: 25.688571363s ago: executing program 1 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 25.611990547s ago: executing program 1 (id=196): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 24.528561617s ago: executing program 1 (id=198): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) 24.46206068s ago: executing program 1 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.086010418s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000200)={0x800080, 0x4, 0x8, 0x7, 0x800043, 0x558}) 23.250418777s ago: executing program 1 (id=213): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x1000000}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xa}, 0x0) 22.98028741s ago: executing program 32 (id=213): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x1000000}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xa}, 0x0) 8.15120007s ago: executing program 3 (id=264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 7.820659446s ago: executing program 3 (id=267): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000694000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000695000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000334000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 6.255388708s ago: executing program 3 (id=272): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x5, 0x3, 0x4, 0x0, {0x4e23, 0x4e22, [0x10002, 0xffff, 0x1, 0xfffffffe], [0x0, 0x7], 0x0, [0xdb4, 0x612]}, 0x1000006, 0x401}}, 0x4c}}, 0x20004010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c00000068000104d20010000000008000000000000000000c00020001000000150000000c000c800600010000000000060003000100000044000c80080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 6.02636218s ago: executing program 3 (id=275): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000}}) 5.860454547s ago: executing program 3 (id=276): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="1201100127aa18080204025683490102030109021200010000500f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) 5.591785559s ago: executing program 4 (id=277): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102eaf6d108830434121ac0c10203010902120001060880400904ac05006211e109"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0xee, &(0x7f0000000340)=ANY=[@ANYBLOB="ee032d7a8b13ead504f11fd8bee8fd77f65a480fbd223b644f74ddaaa3b24c1280f7b85de0ad4805572fd4c18db4dfc57d72ddcc711f2a1dea49d900dac079ca609a20e92d43cf6b37b284969ef75e9d1e90e578e845e1c738065661b1969f9b40e655e05252e18678261c00c5dacb5c30816b51166a01b33dbe7c6c6cf6b4821e6bcc5896cd3752054924ff48a604b86fa1e657d43520645979f565462aaabe68e2e35c03eedc3cae35ec44de6f5c7e5be6959510eb48c40be776148b7e8d5f005ea0d397e09f4b167d0c402ef5ac4664e26ced29d7df23214801c42d27a02710da0c9ed091f8c97faa28cf1cee"]}, {0x0, 0x0}, {0xeb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, {0x50, &(0x7f00000002c0)=ANY=[@ANYBLOB="5003aadccab4dfeaa8955c2c8bb1663e4fdfa8216ab898fcef961123406fdd9c813a0beb166859ebbe345d8e7bca2acc302c45ca30b3ba9f2d792e16619664b4af099d6b4ff7c771bcc51c609c4d5341"]}]}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852a9000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x0, 0x420, 0x330, 0x0, 0x0, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'erspan0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0x2c731f28b040cc3c], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) socket(0x40000000015, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x40400) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f0000004200)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000380)={r5, 0x1, r3, 0x10000}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) ioctl$IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f0000000100)={0x0, 0x52b00000000000, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000308000008001b0100000000080000004c6f0000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x40810) socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="403698"], 0x0, 0x0}) 3.127425684s ago: executing program 2 (id=281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000081}, 0x40004) 2.944957273s ago: executing program 2 (id=282): socket(0x11, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000001200)=0x8a4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a2c0)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='prev_pid==1\x00', 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x62994993c91c2846) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x6, 0x1, 0x403}) 1.776731968s ago: executing program 0 (id=286): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0x40045613, &(0x7f0000000300)={0x3, @win={{0x0, 0x5, 0x79, 0x6}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x7f}}) 1.747676409s ago: executing program 3 (id=287): io_uring_setup(0x4823, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000007c0)="$eJzs3T+LI2UcB/DfJNnJqEVS2CjCDXiF1eFeJzZZ5A7ErTxSqIUu3h3IJgh3EPAPxquutbGw8BUIgi/kGt+BYCvYecLByExmNpMll9vIZcXdz6d6eOb5zvyeybA7TX755LXp8e087j74+rfIsiQ6oxjF4ySG0YnGt7Fi9F0AAP9nj4si/iwWtsklEZHtriwAYIfO9v+/txz+ci5lAQA7dOuDD987ODy88X4WWdycPpyl5ez04Wy8OH5wNz6LSdyJN2MQTyKqF4W9qN4WyuHNoijmvbw0jKvT+WxcJqcfP6rPf/BHRJXfj0EMq6mTt40q/+7hjf18oZWfz8ZJvFhff1Tmr8cgXj4Jr+Svr8nHOI03Xm/Vfy0G8eun8XlM4nZVxDL/zX6ev1N8/9dXH5XllflkPhv3q3VLRfd8PxkAAAAAAAAAAAAAAAAAAAAAAC6ya3XvnH7kV+LqtJyq++90n0TVCyhvDFf78yzySXOidn+goijmRfzYaimYF/XCZb4Xr/bajQUBAAAAAAAAAAAAAAAAAADg8rr/xZfHR5PJnXvPZdB0A+hFxN+3Iv7teUatmSuxeXG/vubRZNKphytrHqXtmeg2a5KIjWWUm3hOt+VZgxdO19wMfvq53OCzz9M9iWetQ2+t3+De7vfVPF3HR8n6a/Wjmcnqh+SHNGK5Jo126pWnP0jp08ooYpvHL117aLD13tOXqsF8w5pINhX29u+LO1fPJKd3kVZ3dW18rx604qtrsjN97suWHqclVbeO/i7+DAEAAAAAAAAAAAAAAAAAACvf/19z8MHGaKfwVWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALojl7/9vMZjX4TMsTuPe/f94iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwC/wQAAP//Lq5VHA==") r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r5, 0x29, 0x1d, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02318e", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @loopback, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x2c, 0x0, @mcast1, @empty, [@hopopts={0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x31}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0xb0ffffff}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xfff7ffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x0, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xffffffff, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x6, 0x2, 0x87a9, 0x1, 0x5, 0xfffffffffffffffb, 0x7fff, 0x684d275, 0x1000000}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept$alg(r0, 0x0, 0x0) fcntl$dupfd(r6, 0x406, r6) 1.71992831s ago: executing program 4 (id=288): r0 = syz_usbip_server_init(0x5) read(r0, &(0x7f0000000180)=""/146, 0x92) 1.670514082s ago: executing program 2 (id=289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10040003}, 0x8008880) semget$private(0x0, 0x3, 0x48) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x8000) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) epoll_pwait(r3, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000140)={[0x7]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2083) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) syz_open_dev$sndctrl(0x0, 0x1ff, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2000019f, &(0x7f0000000100)}) socket$inet_tcp(0x2, 0x1, 0x0) 1.530934879s ago: executing program 0 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000340)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @timestamp_addr={0x44, 0xc, 0x36, 0x1, 0x1, [{@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010132}, {@local}, {@empty}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private, 0x400}]}]}}}}}}}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xe) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}, 0x50) unshare(0x400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x8, &(0x7f0000003040)={0xff, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7}, 0xc) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r9, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.135822957s ago: executing program 5 (id=214): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 918.335497ms ago: executing program 4 (id=291): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x38414762, 0x0, @discrete={0x8d, 0x1bd}}) 915.110747ms ago: executing program 0 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)) 810.334113ms ago: executing program 4 (id=293): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7300}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) 724.104997ms ago: executing program 4 (id=294): socket$kcm(0x11, 0x200000000000003, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b54cbe", 0xee}, {&(0x7f0000000840)="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", 0x1be}], 0x2}, 0x8001) 670.776219ms ago: executing program 0 (id=295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) mkdir(0x0, 0x22) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) 542.618835ms ago: executing program 4 (id=296): syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 502.931967ms ago: executing program 0 (id=297): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x3e, 0x2, 0x4, "3bd9e82ea206e410020000cf00e89a000000002600007e00", 0x43564548}) 337.667144ms ago: executing program 0 (id=298): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private0, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r2}, &(0x7f0000000180)=0x8) 166.390392ms ago: executing program 2 (id=299): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) pread64(r0, &(0x7f0000000280)=""/172, 0xac, 0xe0) 166.233442ms ago: executing program 5 (id=300): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r6, 0x5300}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000600)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x8}, 0x2) 99.440155ms ago: executing program 2 (id=301): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 0s ago: executing program 2 (id=302): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x1b52c3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000000000033) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r2, 0x2) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. [ 57.785509][ T4173] cgroup: Unknown subsys name 'net' [ 57.960991][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.385577][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.821815][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.863979][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.891736][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 60.948251][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.979982][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 61.041681][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.049388][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.058121][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.071358][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.078537][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.087338][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.114752][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.122008][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.130297][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.144113][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.151246][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.159056][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.195260][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.204542][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.212258][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.220771][ T4199] device bridge_slave_0 entered promiscuous mode [ 61.234518][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.242276][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.250219][ T4199] device bridge_slave_1 entered promiscuous mode [ 61.274978][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.305415][ T4193] team0: Port device team_slave_0 added [ 61.313591][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.337735][ T4193] team0: Port device team_slave_1 added [ 61.343760][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.350949][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.359308][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.369546][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.380430][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.408580][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.415710][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.423734][ T4197] device bridge_slave_0 entered promiscuous mode [ 61.431940][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.439404][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.447411][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.456352][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.475455][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.482559][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.490346][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.510742][ T4187] team0: Port device team_slave_0 added [ 61.523197][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.530594][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.557048][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.589796][ T4187] team0: Port device team_slave_1 added [ 61.598000][ T4199] team0: Port device team_slave_0 added [ 61.609358][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.616642][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.642790][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.655946][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.667076][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.677641][ T4199] team0: Port device team_slave_1 added [ 61.684776][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.706347][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.727808][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.734768][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.760687][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.773606][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.780669][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.807003][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.856874][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.863935][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.890024][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.903207][ T4197] team0: Port device team_slave_0 added [ 61.920048][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.927430][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.936451][ T4186] team0: Port device team_slave_0 added [ 61.942662][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.949874][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.976364][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.989387][ T4197] team0: Port device team_slave_1 added [ 62.003927][ T4186] team0: Port device team_slave_1 added [ 62.035753][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.042440][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.049447][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.057600][ T4187] Cannot create hsr debugfs directory [ 62.075372][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.082347][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.108385][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.146626][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.153599][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.179806][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.191338][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.198670][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.224654][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.259664][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.266880][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.292877][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.321284][ T4199] device hsr_slave_0 entered promiscuous mode [ 62.328856][ T4199] device hsr_slave_1 entered promiscuous mode [ 62.336323][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.343894][ T4199] Cannot create hsr debugfs directory [ 62.439348][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.446502][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.452937][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.460778][ T4197] Cannot create hsr debugfs directory [ 62.486937][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.493739][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.500947][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.508675][ T4186] Cannot create hsr debugfs directory [ 62.516109][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 62.522695][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 62.531521][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 62.551457][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 62.595344][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 62.735072][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.749298][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.759878][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.773275][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.824368][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.843759][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.869074][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.878844][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.910817][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.933736][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.943545][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.952687][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.001603][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.060051][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.069567][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.081796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.090824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.114799][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.127887][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.141846][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.157182][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.184039][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.191379][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.200439][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.211955][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.219232][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.228863][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.259888][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.269646][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.278256][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.290046][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.298922][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.306045][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.316080][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.323656][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.339334][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.350672][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.379214][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.388464][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.399165][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.406382][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.414569][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.423598][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.432558][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.439655][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.448194][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.457226][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.467099][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.479400][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.493850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.538637][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.549409][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.570297][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.580972][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.590100][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.599524][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.607622][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.616700][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.625815][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.634396][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.643493][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.652048][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.660714][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.669812][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.678870][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.687223][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.695017][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.731946][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.765783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.776935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.787726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.798059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.808757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.817384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.826378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.834022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.842179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.851238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.860515][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.867623][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.875424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.883969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.893089][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.900441][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.910189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.919544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.930823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.939960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.966809][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.979727][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.993211][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.007253][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.020996][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.028511][ T3095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.043775][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.052221][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.061235][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.070705][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.077838][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.092223][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.116408][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.143429][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.160890][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.173214][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.181960][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.190517][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.199122][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.207999][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.216625][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.231099][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.248284][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.266240][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.277071][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.288726][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.298647][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.306577][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.324446][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.335981][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.366617][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.388285][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.398752][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.414014][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.423037][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.437825][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.447545][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.460814][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.469738][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.478189][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.488308][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.507502][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.569198][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.595546][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 64.595599][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 64.613079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.622564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.635469][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 64.641575][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 64.673601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.681374][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 64.703236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.731652][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.753895][ T4187] device veth0_vlan entered promiscuous mode [ 64.763192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.773566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.782777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.791553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.807876][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.817105][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.825975][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.833067][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.850390][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.871023][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.880686][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.888563][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.896478][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.904998][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.913766][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.920873][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.934644][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.942251][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.958454][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.969273][ T4187] device veth1_vlan entered promiscuous mode [ 65.000337][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.015680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.024285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.033381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.043359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.051845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.060947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.069017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.081103][ T4193] device veth0_vlan entered promiscuous mode [ 65.102357][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.112374][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.123162][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.132244][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.141676][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.150304][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.159537][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.167877][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.176068][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.204892][ T4199] device veth0_vlan entered promiscuous mode [ 65.218789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.231932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.242966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.252063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.270728][ T4199] device veth1_vlan entered promiscuous mode [ 65.279962][ T4193] device veth1_vlan entered promiscuous mode [ 65.296203][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.307650][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.316917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.325581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.333565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.341967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.352089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.360716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.369674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.379729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.388645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.399814][ T4187] device veth0_macvtap entered promiscuous mode [ 65.446289][ T4187] device veth1_macvtap entered promiscuous mode [ 65.472675][ T4199] device veth0_macvtap entered promiscuous mode [ 65.483423][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.493222][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.504127][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.512848][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.521496][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.530264][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.541311][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.550043][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.559269][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.567454][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.578875][ T4197] device veth0_vlan entered promiscuous mode [ 65.596830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.607056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.622368][ T4199] device veth1_macvtap entered promiscuous mode [ 65.640201][ T4197] device veth1_vlan entered promiscuous mode [ 65.662840][ T4193] device veth0_macvtap entered promiscuous mode [ 65.681160][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.704898][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.724765][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.736544][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.745549][ T4193] device veth1_macvtap entered promiscuous mode [ 65.754539][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.762250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.770736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.779662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.790204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.799138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.808287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.817166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.826218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.834631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.843279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.851901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.867588][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.879148][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.891461][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.906082][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.915042][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.925009][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.934253][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952471][ T4197] device veth0_macvtap entered promiscuous mode [ 65.961350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.970609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.980008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.989069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.998108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.009426][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018362][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.027847][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.038761][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.058792][ T4197] device veth1_macvtap entered promiscuous mode [ 66.071178][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.081802][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.092449][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.104098][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.115050][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.131063][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.141784][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.153286][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.164827][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.176276][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.193109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.202841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.212179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.221157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.232364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.240440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.266301][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.275054][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.284664][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.296421][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.321882][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.332567][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.353609][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.365687][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.377070][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.387814][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.399466][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.429729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.447864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.459705][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.470631][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.480707][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.491595][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.501929][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.512667][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.524700][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.534440][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.562085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.571814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.584341][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.593854][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.603128][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.614146][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.659989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.675086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.676210][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 66.691677][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 66.697999][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 66.704021][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 66.723605][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.740696][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.756422][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 66.766837][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.783262][ T4186] device veth0_vlan entered promiscuous mode [ 66.799042][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.810432][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.819344][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.830760][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.842975][ T4186] device veth1_vlan entered promiscuous mode [ 66.849398][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.865475][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.931523][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.939445][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.944030][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.954087][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.956572][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.971360][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.008665][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.017189][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.017278][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.025019][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.042396][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.061024][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.077174][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.085010][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.101349][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.111888][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.121528][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.149799][ T4186] device veth0_macvtap entered promiscuous mode [ 67.171045][ T4186] device veth1_macvtap entered promiscuous mode [ 67.200547][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.211021][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.214691][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.254102][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.276365][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.291880][ T4264] loop0: detected capacity change from 0 to 256 [ 67.306451][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.323913][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.333262][ T4264] ======================================================= [ 67.333262][ T4264] WARNING: The mand mount option has been deprecated and [ 67.333262][ T4264] and is ignored by this kernel. Remove the mand [ 67.333262][ T4264] option from the mount to silence this warning. [ 67.333262][ T4264] ======================================================= [ 67.341240][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.387095][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.418179][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.443521][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.452927][ T4264] FAT-fs (loop0): Directory bread(block 64) failed [ 67.461837][ T4264] FAT-fs (loop0): Directory bread(block 65) failed [ 67.468888][ T4264] FAT-fs (loop0): Directory bread(block 66) failed [ 67.476140][ T4264] FAT-fs (loop0): Directory bread(block 67) failed [ 67.480672][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.482734][ T4264] FAT-fs (loop0): Directory bread(block 68) failed [ 67.501782][ T4264] FAT-fs (loop0): Directory bread(block 69) failed [ 67.504703][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.526653][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.542351][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.544471][ T4264] FAT-fs (loop0): Directory bread(block 70) failed [ 67.562504][ T4264] FAT-fs (loop0): Directory bread(block 71) failed [ 67.565943][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.570008][ T4264] FAT-fs (loop0): Directory bread(block 72) failed [ 67.577283][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.588359][ T4264] FAT-fs (loop0): Directory bread(block 73) failed [ 67.591536][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.612439][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.676165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.704986][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.725271][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.742380][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.752914][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.764847][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.775061][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.786145][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.798867][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.838592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.866588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.919660][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.936567][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951504][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.962792][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.214503][ T4289] loop3: detected capacity change from 0 to 1024 [ 68.226784][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.247566][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.262075][ T4289] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 68.277465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.310187][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.319256][ T4289] EXT4-fs (loop3): barriers disabled [ 68.327346][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.341545][ T4289] JBD2: no valid journal superblock found [ 68.348290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.355306][ T4289] EXT4-fs (loop3): error loading journal [ 68.388915][ T4285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 68.744155][ T4304] FAULT_INJECTION: forcing a failure. [ 68.744155][ T4304] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.794267][ T4175] Bluetooth: hci3: command 0x0419 tx timeout [ 68.800446][ T4175] Bluetooth: hci1: command 0x0419 tx timeout [ 68.806592][ T4175] Bluetooth: hci0: command 0x0419 tx timeout [ 68.812657][ T4175] Bluetooth: hci2: command 0x0419 tx timeout [ 68.825326][ T4304] CPU: 1 PID: 4304 Comm: syz.2.16 Not tainted syzkaller #0 [ 68.832673][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.842756][ T4304] Call Trace: [ 68.846062][ T4304] [ 68.849012][ T4304] dump_stack_lvl+0x188/0x250 [ 68.853717][ T4304] ? show_regs_print_info+0x20/0x20 [ 68.858944][ T4304] ? load_image+0x410/0x410 [ 68.863473][ T4304] ? __lock_acquire+0x7b50/0x7b50 [ 68.868612][ T4304] ? ringbuf_map_alloc+0x1d1/0x300 [ 68.873748][ T4304] ? __sys_bpf+0x30a/0x6f0 [ 68.878188][ T4304] ? __x64_sys_bpf+0x78/0x90 [ 68.882803][ T4304] ? do_syscall_64+0x4c/0xa0 [ 68.887423][ T4304] should_fail+0x383/0x4b0 [ 68.891873][ T4304] prepare_alloc_pages+0x1e3/0x5b0 [ 68.896590][ T4300] loop1: detected capacity change from 0 to 4096 [ 68.897015][ T4304] __alloc_pages+0x11b/0x480 [ 68.897046][ T4304] ? zone_statistics+0x170/0x170 [ 68.913023][ T4304] bpf_ringbuf_alloc+0x94/0x4d0 [ 68.918068][ T4304] ? bpf_map_init_from_attr+0x146/0x300 [ 68.923661][ T4304] ringbuf_map_alloc+0x1d1/0x300 [ 68.928639][ T4304] map_create+0x481/0x2330 [ 68.933086][ T4304] ? bpf_lsm_bpf+0x5/0x10 [ 68.937421][ T4304] __sys_bpf+0x30a/0x6f0 [ 68.941660][ T4304] ? bpf_link_show_fdinfo+0x380/0x380 [ 68.947056][ T4304] __x64_sys_bpf+0x78/0x90 [ 68.951502][ T4304] do_syscall_64+0x4c/0xa0 [ 68.955938][ T4304] ? clear_bhb_loop+0x30/0x80 [ 68.960634][ T4304] ? clear_bhb_loop+0x30/0x80 [ 68.965308][ T4304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.971207][ T4304] RIP: 0033:0x7f89e1f07159 [ 68.975634][ T4304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.995455][ T4304] RSP: 002b:00007f89e015f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.004083][ T4304] RAX: ffffffffffffffda RBX: 00007f89e218efa0 RCX: 00007f89e1f07159 [ 69.012074][ T4304] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 0000000000000000 [ 69.020044][ T4304] RBP: 00007f89e1f9e06b R08: 0000000000000000 R09: 0000000000000000 [ 69.028018][ T4304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.036013][ T4304] R13: 00007f89e218f038 R14: 00007f89e218efa0 R15: 00007ffec8be00e8 [ 69.044012][ T4304] [ 69.167354][ T4175] Bluetooth: hci4: command 0x0419 tx timeout [ 69.213334][ T4291] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 69.376510][ T4300] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 69.605079][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2: corrupted inode contents [ 69.722708][ T4300] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.2: mark_inode_dirty error [ 69.770358][ T4325] loop3: detected capacity change from 0 to 512 [ 69.835959][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2: corrupted inode contents [ 69.866565][ T4325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.949779][ T4325] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.957574][ T4300] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.2: mark_inode_dirty error [ 70.034161][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2: corrupted inode contents [ 70.061577][ T4325] EXT4-fs (loop3): 1 truncate cleaned up [ 70.075364][ T4325] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 70.625163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.635167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.645171][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.655175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.665173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.675176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.685172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.695172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.705170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.715174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.069562][ T4300] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.2: mark_inode_dirty error [ 71.092454][ T4325] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.135556][ T4300] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2: corrupted inode contents [ 71.140985][ T4340] loop2: detected capacity change from 0 to 128 [ 71.205428][ T4300] EXT4-fs error (device loop1): ext4_truncate:4286: inode #15: comm syz.1.2: mark_inode_dirty error [ 71.222062][ T4340] FAT-fs (loop2): Directory bread(block 1048) failed [ 71.240428][ T4340] FAT-fs (loop2): Directory bread(block 1049) failed [ 71.265059][ T4340] FAT-fs (loop2): Directory bread(block 1050) failed [ 71.311640][ T4300] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 71.311678][ T4340] FAT-fs (loop2): Directory bread(block 1051) failed [ 71.311711][ T4340] FAT-fs (loop2): Directory bread(block 1052) failed [ 71.336634][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.343300][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370373][ T4340] FAT-fs (loop2): Directory bread(block 1053) failed [ 71.385380][ T4340] FAT-fs (loop2): Directory bread(block 1054) failed [ 71.392157][ T4340] FAT-fs (loop2): Directory bread(block 1055) failed [ 71.420586][ T4315] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.2: corrupted inode contents [ 71.553768][ T4186] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 71.566365][ T4344] sd 0:0:1:0: PR command failed: 2 [ 71.571560][ T4344] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 71.595432][ T4344] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 71.904906][ T4355] FAULT_INJECTION: forcing a failure. [ 71.904906][ T4355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 71.969367][ T4355] CPU: 1 PID: 4355 Comm: syz.4.31 Not tainted syzkaller #0 [ 71.976627][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.986717][ T4355] Call Trace: [ 71.990021][ T4355] [ 71.992969][ T4355] dump_stack_lvl+0x188/0x250 [ 71.997676][ T4355] ? show_regs_print_info+0x20/0x20 [ 72.002900][ T4355] ? load_image+0x410/0x410 [ 72.007442][ T4355] ? __lock_acquire+0x7b50/0x7b50 [ 72.009541][ T4348] loop1: detected capacity change from 0 to 8192 [ 72.012505][ T4355] should_fail+0x383/0x4b0 [ 72.023344][ T4355] prepare_alloc_pages+0x1e3/0x5b0 [ 72.028714][ T4355] __alloc_pages+0x11b/0x480 [ 72.033356][ T4355] ? zone_statistics+0x170/0x170 [ 72.038343][ T4355] bpf_ringbuf_alloc+0x10c/0x4d0 [ 72.043310][ T4355] ? bpf_map_init_from_attr+0x146/0x300 [ 72.048892][ T4355] ringbuf_map_alloc+0x1d1/0x300 [ 72.053878][ T4355] map_create+0x481/0x2330 [ 72.058331][ T4355] ? bpf_lsm_bpf+0x5/0x10 [ 72.062700][ T4355] __sys_bpf+0x30a/0x6f0 [ 72.066984][ T4355] ? bpf_link_show_fdinfo+0x380/0x380 [ 72.072419][ T4355] __x64_sys_bpf+0x78/0x90 [ 72.076879][ T4355] do_syscall_64+0x4c/0xa0 [ 72.081324][ T4355] ? clear_bhb_loop+0x30/0x80 [ 72.086026][ T4355] ? clear_bhb_loop+0x30/0x80 [ 72.090725][ T4355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.096647][ T4355] RIP: 0033:0x7f6142e27159 [ 72.101096][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.120831][ T4355] RSP: 002b:00007f614107f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.129287][ T4355] RAX: ffffffffffffffda RBX: 00007f61430aefa0 RCX: 00007f6142e27159 [ 72.137288][ T4355] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 0000000000000000 [ 72.145313][ T4355] RBP: 00007f6142ebe06b R08: 0000000000000000 R09: 0000000000000000 [ 72.153311][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.161313][ T4355] R13: 00007f61430af038 R14: 00007f61430aefa0 R15: 00007ffd0f8aaa58 [ 72.169340][ T4355] [ 72.179014][ T4351] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 72.221742][ T4348] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.401693][ T4358] loop0: detected capacity change from 0 to 164 [ 72.545255][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.572400][ T4358] netlink: 72 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.584122][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 73.413574][ T4354] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 73.623295][ T4384] loop4: detected capacity change from 0 to 1024 [ 73.685647][ T4378] loop2: detected capacity change from 0 to 4096 [ 73.709202][ T4384] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.762733][ T4380] loop0: detected capacity change from 0 to 4096 [ 73.774047][ T4384] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,bsddf,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 73.776056][ T4378] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.802412][ T4391] FAULT_INJECTION: forcing a failure. [ 73.802412][ T4391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 73.819417][ T4391] CPU: 1 PID: 4391 Comm: syz.3.45 Not tainted syzkaller #0 [ 73.826657][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.836740][ T4391] Call Trace: [ 73.840043][ T4391] [ 73.842990][ T4391] dump_stack_lvl+0x188/0x250 [ 73.847698][ T4391] ? show_regs_print_info+0x20/0x20 [ 73.852925][ T4391] ? load_image+0x410/0x410 [ 73.857464][ T4391] ? __lock_acquire+0x7b50/0x7b50 [ 73.862525][ T4391] should_fail+0x383/0x4b0 [ 73.867065][ T4391] prepare_alloc_pages+0x1e3/0x5b0 [ 73.872223][ T4391] __alloc_pages+0x11b/0x480 [ 73.876858][ T4391] ? zone_statistics+0x170/0x170 [ 73.881844][ T4391] bpf_ringbuf_alloc+0x18e/0x4d0 [ 73.886810][ T4391] ? bpf_map_init_from_attr+0x146/0x300 [ 73.892394][ T4391] ringbuf_map_alloc+0x1d1/0x300 [ 73.897368][ T4391] map_create+0x481/0x2330 [ 73.901819][ T4391] ? bpf_lsm_bpf+0x5/0x10 [ 73.906273][ T4391] __sys_bpf+0x30a/0x6f0 [ 73.910544][ T4391] ? bpf_link_show_fdinfo+0x380/0x380 [ 73.915965][ T4391] __x64_sys_bpf+0x78/0x90 [ 73.920537][ T4391] do_syscall_64+0x4c/0xa0 [ 73.924979][ T4391] ? clear_bhb_loop+0x30/0x80 [ 73.929679][ T4391] ? clear_bhb_loop+0x30/0x80 [ 73.934386][ T4391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.940389][ T4391] RIP: 0033:0x7ff795535159 [ 73.944831][ T4391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.964612][ T4391] RSP: 002b:00007ff79378d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.973069][ T4391] RAX: ffffffffffffffda RBX: 00007ff7957bcfa0 RCX: 00007ff795535159 [ 73.981073][ T4391] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 0000000000000000 [ 73.989073][ T4391] RBP: 00007ff7955cc06b R08: 0000000000000000 R09: 0000000000000000 [ 73.997070][ T4391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.005218][ T4391] R13: 00007ff7957bd038 R14: 00007ff7957bcfa0 R15: 00007ffc874c5fc8 [ 74.013231][ T4391] [ 74.085029][ T4392] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET) [ 74.135821][ T4380] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback. [ 74.244199][ T4380] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.39: corrupted inode contents [ 74.275837][ T4380] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #15: comm syz.0.39: mark_inode_dirty error [ 74.299894][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'. [ 74.312274][ T4380] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.39: corrupted inode contents [ 74.338646][ T4401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 74.351407][ T4380] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.39: mark_inode_dirty error [ 74.381538][ T4380] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.39: corrupted inode contents [ 74.499029][ T4407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 74.508542][ T4380] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.39: mark_inode_dirty error [ 75.286084][ T4407] device veth3 entered promiscuous mode [ 75.339063][ T4380] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.39: corrupted inode contents [ 75.396208][ T4380] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.39: mark_inode_dirty error [ 75.483587][ T4380] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 75.523014][ T4402] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.39: corrupted inode contents [ 75.621204][ T4187] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 75.630761][ T4429] loop4: detected capacity change from 0 to 1024 [ 75.691292][ T4429] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 75.723255][ T4429] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.598211][ T4429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 76.615571][ T4440] FAULT_INJECTION: forcing a failure. [ 76.615571][ T4440] name fail_futex, interval 1, probability 0, space 0, times 1 [ 76.635334][ T4429] System zones: 0-1, 3-36 [ 76.681399][ T4429] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 76.717822][ T4442] loop0: detected capacity change from 0 to 512 [ 76.735239][ T4440] CPU: 0 PID: 4440 Comm: syz.3.63 Not tainted syzkaller #0 [ 76.742497][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.752578][ T4440] Call Trace: [ 76.755879][ T4440] [ 76.759003][ T4440] dump_stack_lvl+0x188/0x250 [ 76.763706][ T4440] ? show_regs_print_info+0x20/0x20 [ 76.768920][ T4440] ? load_image+0x410/0x410 [ 76.773440][ T4440] ? netlink_getsockopt+0x570/0x570 [ 76.778665][ T4440] ? aa_sock_msg_perm+0x94/0x150 [ 76.783635][ T4440] ? apparmor_socket_sendmsg+0x88/0x230 [ 76.789215][ T4440] should_fail+0x383/0x4b0 [ 76.793660][ T4440] get_futex_key+0x1a1/0x12d0 [ 76.798367][ T4440] ? futex_wait_restart+0x250/0x250 [ 76.803592][ T4440] ? __lock_acquire+0x13dc/0x7b50 [ 76.808745][ T4440] futex_wake+0x101/0x540 [ 76.813115][ T4440] ? futex_wait+0x680/0x680 [ 76.817642][ T4440] ? verify_lock_unused+0x140/0x140 [ 76.822872][ T4440] ? verify_lock_unused+0x140/0x140 [ 76.828097][ T4440] do_futex+0xd83/0x12b0 [ 76.832383][ T4440] ? futex_exit_release+0x1c0/0x1c0 [ 76.837604][ T4440] ? __context_tracking_exit+0x4c/0x80 [ 76.843091][ T4440] __se_sys_futex+0x389/0x420 [ 76.847807][ T4440] ? __x64_sys_futex+0xf0/0xf0 [ 76.852600][ T4440] ? __x64_sys_futex+0x1d/0xf0 [ 76.857390][ T4440] do_syscall_64+0x4c/0xa0 [ 76.861828][ T4440] ? clear_bhb_loop+0x30/0x80 [ 76.866524][ T4440] ? clear_bhb_loop+0x30/0x80 [ 76.871231][ T4440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.877141][ T4440] RIP: 0033:0x7ff795535159 [ 76.881586][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.901224][ T4440] RSP: 002b:00007ff79378d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.909684][ T4440] RAX: ffffffffffffffda RBX: 00007ff7957bcfa8 RCX: 00007ff795535159 [ 76.917683][ T4440] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff7957bcfac [ 76.925678][ T4440] RBP: 00007ff7957bcfa0 R08: 0022579be904904a R09: 0000000000000000 [ 76.933937][ T4440] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 76.941927][ T4440] R13: 00007ff7957bd038 R14: 00007ffc874c5ee0 R15: 00007ffc874c5fc8 [ 76.949936][ T4440] [ 77.131263][ T4442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 77.151141][ T4445] loop3: detected capacity change from 0 to 1024 [ 77.158435][ T4442] System zones: 1-12 [ 77.164402][ T4442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.59: missing EA_INODE flag [ 77.216700][ T4445] EXT4-fs (loop3): Ignoring removed orlov option [ 77.437256][ T4442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.59: error while reading EA inode 12 err=-117 [ 77.451994][ T4448] loop1: detected capacity change from 0 to 164 [ 77.563019][ T4445] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,usrquota,norecovery,,errors=continue. Quota mode: writeback. [ 77.756380][ T4442] EXT4-fs (loop0): 1 orphan inode deleted [ 77.818974][ T4442] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 78.382968][ T4467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.400362][ T4481] 9pnet: p9_fd_create_tcp (4481): problem connecting socket to 127.0.0.1 [ 79.433036][ T4483] loop1: detected capacity change from 0 to 512 [ 79.572675][ T4483] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.627381][ T4483] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.745978][ T4483] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.79: corrupted inode contents [ 79.807255][ T4483] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.79: mark_inode_dirty error [ 79.867133][ T4483] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.79: corrupted inode contents [ 79.902010][ T4500] loop2: detected capacity change from 0 to 512 [ 79.922990][ T4483] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.79: mark_inode_dirty error [ 79.972999][ T4500] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.731315][ T4495] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 80.737086][ T4500] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.958111][ T4508] loop1: detected capacity change from 0 to 2048 [ 81.432863][ T4521] FAULT_INJECTION: forcing a failure. [ 81.432863][ T4521] name failslab, interval 1, probability 0, space 0, times 1 [ 81.470840][ T4523] loop0: detected capacity change from 0 to 512 [ 81.485516][ T4521] CPU: 1 PID: 4521 Comm: syz.1.93 Not tainted syzkaller #0 [ 81.492771][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.502846][ T4521] Call Trace: [ 81.506320][ T4521] [ 81.509291][ T4521] dump_stack_lvl+0x188/0x250 [ 81.514012][ T4521] ? show_regs_print_info+0x20/0x20 [ 81.519247][ T4521] ? load_image+0x410/0x410 [ 81.523791][ T4521] ? __might_sleep+0xf0/0xf0 [ 81.528407][ T4521] ? __lock_acquire+0x7b50/0x7b50 [ 81.533462][ T4521] ? __local_bh_enable_ip+0x136/0x1c0 [ 81.538868][ T4521] ? lockdep_hardirqs_on+0x94/0x140 [ 81.544097][ T4521] should_fail+0x383/0x4b0 [ 81.548540][ T4521] should_failslab+0x5/0x20 [ 81.553076][ T4521] slab_pre_alloc_hook+0x51/0xc0 [ 81.558047][ T4521] kmem_cache_alloc_node+0x47/0x2c0 [ 81.563270][ T4521] ? __alloc_skb+0xf4/0x750 [ 81.567805][ T4521] __alloc_skb+0xf4/0x750 [ 81.572173][ T4521] netlink_ack+0x35c/0xb10 [ 81.576632][ T4521] ? memcpy+0x3c/0x60 [ 81.580637][ T4521] ? netlink_dump+0xdd0/0xdd0 [ 81.585349][ T4521] ? __copy_skb_header+0x3ba/0x4f0 [ 81.590496][ T4521] netlink_rcv_skb+0x267/0x430 [ 81.595291][ T4521] ? rtnetlink_bind+0x80/0x80 [ 81.599995][ T4521] ? netlink_ack+0xb10/0xb10 [ 81.604636][ T4521] netlink_unicast+0x78f/0x940 [ 81.609434][ T4521] netlink_sendmsg+0x8ba/0xbe0 [ 81.614223][ T4521] ? netlink_getsockopt+0x570/0x570 [ 81.619533][ T4521] ? aa_sock_msg_perm+0x94/0x150 [ 81.624478][ T4521] ? apparmor_socket_sendmsg+0x88/0x230 [ 81.630027][ T4521] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.635316][ T4521] ? security_socket_sendmsg+0x7c/0xa0 [ 81.640802][ T4521] ? netlink_getsockopt+0x570/0x570 [ 81.646014][ T4521] ____sys_sendmsg+0x5be/0x8f0 [ 81.650786][ T4521] ? __sys_sendmsg_sock+0x30/0x30 [ 81.655806][ T4521] ? import_iovec+0x6f/0xa0 [ 81.660307][ T4521] ___sys_sendmsg+0x236/0x2e0 [ 81.664983][ T4521] ? __sys_sendmsg+0x290/0x290 [ 81.669759][ T4521] __se_sys_sendmsg+0x1b7/0x2a0 [ 81.674601][ T4521] ? __x64_sys_sendmsg+0x80/0x80 [ 81.679527][ T4521] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.685523][ T4521] ? lockdep_hardirqs_on+0x94/0x140 [ 81.690715][ T4521] do_syscall_64+0x4c/0xa0 [ 81.695128][ T4521] ? clear_bhb_loop+0x30/0x80 [ 81.699810][ T4521] ? clear_bhb_loop+0x30/0x80 [ 81.704475][ T4521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.710358][ T4521] RIP: 0033:0x7f9f1ed38159 [ 81.714765][ T4521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.734362][ T4521] RSP: 002b:00007f9f1cf90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.742874][ T4521] RAX: ffffffffffffffda RBX: 00007f9f1efbffa0 RCX: 00007f9f1ed38159 [ 81.750860][ T4521] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 81.758850][ T4521] RBP: 00007f9f1edcf06b R08: 0000000000000000 R09: 0000000000000000 [ 81.766831][ T4521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.774798][ T4521] R13: 00007f9f1efc0038 R14: 00007f9f1efbffa0 R15: 00007ffc26f66dc8 [ 81.782770][ T4521] [ 83.050720][ T4523] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 84.129150][ T4551] netlink: 180 bytes leftover after parsing attributes in process `syz.2.104'. [ 84.498162][ T4552] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.677687][ T1107] cfg80211: failed to load regulatory.db [ 86.708419][ T4572] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 86.753051][ T4577] FAULT_INJECTION: forcing a failure. [ 86.753051][ T4577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 86.767315][ T4577] CPU: 1 PID: 4577 Comm: syz.3.115 Not tainted syzkaller #0 [ 86.774715][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.784792][ T4577] Call Trace: [ 86.788184][ T4577] [ 86.791137][ T4577] dump_stack_lvl+0x188/0x250 [ 86.795849][ T4577] ? show_regs_print_info+0x20/0x20 [ 86.801082][ T4577] ? load_image+0x410/0x410 [ 86.805615][ T4577] ? __lock_acquire+0x7b50/0x7b50 [ 86.810668][ T4577] ? mon_bin_open+0x196/0x500 [ 86.815364][ T4577] ? chrdev_open+0x585/0x5f0 [ 86.820002][ T4577] should_fail+0x383/0x4b0 [ 86.824447][ T4577] prepare_alloc_pages+0x1e3/0x5b0 [ 86.829596][ T4577] __alloc_pages+0x11b/0x480 [ 86.834231][ T4577] ? zone_statistics+0x170/0x170 [ 86.839212][ T4577] ? alloc_pages+0x452/0x560 [ 86.843832][ T4577] get_zeroed_page+0x13/0x30 [ 86.848533][ T4577] mon_bin_open+0x225/0x500 [ 86.853073][ T4577] chrdev_open+0x585/0x5f0 [ 86.857517][ T4577] ? cd_forget+0x160/0x160 [ 86.861966][ T4577] ? fsnotify_perm+0x3a7/0x560 [ 86.866760][ T4577] ? cd_forget+0x160/0x160 [ 86.871198][ T4577] do_dentry_open+0x7f7/0xf90 [ 86.875898][ T4577] ? vfs_open+0x2b/0x80 [ 86.880079][ T4577] path_openat+0x2718/0x2fb0 [ 86.884718][ T4577] ? __kasan_slab_alloc+0xa9/0xc0 [ 86.889778][ T4577] ? do_filp_open+0x400/0x400 [ 86.894495][ T4577] do_filp_open+0x1df/0x400 [ 86.899035][ T4577] ? vfs_tmpfile+0x300/0x300 [ 86.903849][ T4577] ? _raw_spin_unlock+0x24/0x40 [ 86.908720][ T4577] ? alloc_fd+0x59e/0x650 [ 86.913082][ T4577] do_sys_openat2+0x14b/0x500 [ 86.917779][ T4577] ? __lock_acquire+0x7b50/0x7b50 [ 86.922829][ T4577] ? do_sys_open+0xe0/0xe0 [ 86.927268][ T4577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.933275][ T4577] ? lock_chain_count+0x20/0x20 [ 86.938161][ T4577] __x64_sys_openat+0x135/0x160 [ 86.943035][ T4577] do_syscall_64+0x4c/0xa0 [ 86.947471][ T4577] ? clear_bhb_loop+0x30/0x80 [ 86.952168][ T4577] ? clear_bhb_loop+0x30/0x80 [ 86.956876][ T4577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.962788][ T4577] RIP: 0033:0x7ff7954f598e [ 86.967224][ T4577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.986849][ T4577] RSP: 002b:00007ff79378cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.995293][ T4577] RAX: ffffffffffffffda RBX: 00007ff79378d6c0 RCX: 00007ff7954f598e [ 87.003306][ T4577] RDX: 0000000000008001 RSI: 00007ff79378cc00 RDI: ffffffffffffff9c [ 87.011300][ T4577] RBP: 00007ff79378cc00 R08: 0000000000000000 R09: 0000000000000000 [ 87.019292][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 87.027294][ T4577] R13: 00007ff7957bd038 R14: 00007ff7957bcfa0 R15: 00007ffc874c5fc8 [ 87.035415][ T4577] [ 88.819452][ T4601] loop2: detected capacity change from 0 to 128 [ 88.923963][ T4601] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 89.156657][ T4601] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpid,errors=remount-ro,. Quota mode: none. [ 89.255617][ T4601] ext2 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.350043][ T4607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 90.327850][ T4623] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(4) [ 90.640498][ T4635] loop0: detected capacity change from 0 to 512 [ 90.698599][ T4639] loop1: detected capacity change from 0 to 1024 [ 90.738904][ T4639] EXT4-fs (loop1): Ignoring removed bh option [ 90.783483][ T4639] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 90.789158][ T4635] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 90.836053][ T4635] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.204751][ T4635] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.135: corrupted inode contents [ 91.336709][ T4635] EXT4-fs (loop0): Remounting filesystem read-only [ 91.363168][ T4635] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.135: mark_inode_dirty error [ 91.390607][ T4635] EXT4-fs (loop0): Remounting filesystem read-only [ 91.405463][ T4635] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.135: corrupted inode contents [ 91.409430][ T4657] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 3: comm syz.0.135: lblock 8 mapped to illegal pblock 3 (length 26) [ 91.427511][ T4635] EXT4-fs (loop0): Remounting filesystem read-only [ 91.611844][ T4657] EXT4-fs (loop0): Remounting filesystem read-only [ 91.644974][ T4635] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.135: mark_inode_dirty error [ 91.690656][ T4673] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 91.714157][ T4635] EXT4-fs (loop0): Remounting filesystem read-only [ 91.938851][ T4683] FAULT_INJECTION: forcing a failure. [ 91.938851][ T4683] name failslab, interval 1, probability 0, space 0, times 0 [ 92.004456][ T4683] CPU: 0 PID: 4683 Comm: syz.3.153 Not tainted syzkaller #0 [ 92.011821][ T4683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.021913][ T4683] Call Trace: [ 92.025237][ T4683] [ 92.028201][ T4683] dump_stack_lvl+0x188/0x250 [ 92.032915][ T4683] ? show_regs_print_info+0x20/0x20 [ 92.038145][ T4683] ? load_image+0x410/0x410 [ 92.042684][ T4683] ? __might_sleep+0xf0/0xf0 [ 92.047300][ T4683] ? __lock_acquire+0x7b50/0x7b50 [ 92.052342][ T4683] should_fail+0x383/0x4b0 [ 92.056775][ T4683] should_failslab+0x5/0x20 [ 92.061289][ T4683] slab_pre_alloc_hook+0x51/0xc0 [ 92.066237][ T4683] ? copy_mm+0x8b6/0x13d0 [ 92.070660][ T4683] kmem_cache_alloc+0x3d/0x280 [ 92.075430][ T4683] copy_mm+0x8b6/0x13d0 [ 92.079599][ T4683] ? copy_signal+0x610/0x610 [ 92.084192][ T4683] ? __init_rwsem+0x11e/0x160 [ 92.088882][ T4683] ? copy_signal+0x501/0x610 [ 92.093477][ T4683] copy_process+0x17a7/0x3e70 [ 92.098185][ T4683] ? __pidfd_prepare+0x140/0x140 [ 92.103128][ T4683] ? verify_lock_unused+0x140/0x140 [ 92.108362][ T4683] kernel_clone+0x23f/0x990 [ 92.112871][ T4683] ? create_io_thread+0x180/0x180 [ 92.117962][ T4683] __x64_sys_clone+0x19a/0x210 [ 92.122750][ T4683] ? __ia32_sys_vfork+0x130/0x130 [ 92.127787][ T4683] ? lockdep_hardirqs_on+0x94/0x140 [ 92.132992][ T4683] do_syscall_64+0x4c/0xa0 [ 92.137408][ T4683] ? clear_bhb_loop+0x30/0x80 [ 92.142089][ T4683] ? clear_bhb_loop+0x30/0x80 [ 92.146771][ T4683] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.152665][ T4683] RIP: 0033:0x7ff795535159 [ 92.157088][ T4683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.176699][ T4683] RSP: 002b:00007ff79378cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 92.185125][ T4683] RAX: ffffffffffffffda RBX: 00007ff7957bcfa0 RCX: 00007ff795535159 [ 92.193130][ T4683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000 [ 92.201120][ T4683] RBP: 00007ff7955cc06b R08: 0000000000000000 R09: 0000000000000000 [ 92.209103][ T4683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 92.217087][ T4683] R13: 00007ff7957bd038 R14: 00007ff7957bcfa0 R15: 00007ffc874c5fc8 [ 92.225073][ T4683] [ 92.783866][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 92.838661][ T4703] loop4: detected capacity change from 0 to 512 [ 92.926661][ T4703] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 92.991748][ T4703] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.113965][ T4701] loop2: detected capacity change from 0 to 8192 [ 93.201674][ T4701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.321700][ T4716] sctp: [Deprecated]: syz.4.167 (pid 4716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.321700][ T4716] Use struct sctp_sack_info instead [ 93.963051][ T4731] loop0: detected capacity change from 0 to 512 [ 94.110855][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 94.159694][ T4728] loop4: detected capacity change from 0 to 8192 [ 94.201336][ T4731] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.262675][ T4728] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.322728][ T26] audit: type=1800 audit(1789853910.248:2): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 94.504868][ T4746] loop0: detected capacity change from 0 to 128 [ 94.598974][ T4746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 94.619741][ T4752] Zero length message leads to an empty skb [ 94.633283][ T4746] System zones: 1-3, 19-19, 35-36 [ 94.641435][ T4746] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 94.641545][ T4746] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.653275][ T4754] loop3: detected capacity change from 0 to 512 [ 94.753663][ T4754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 94.782182][ T4754] System zones: 1-12 [ 94.791116][ T4754] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.182: missing EA_INODE flag [ 94.804766][ T4754] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.182: error while reading EA inode 12 err=-117 [ 94.828295][ T4754] EXT4-fs (loop3): 1 orphan inode deleted [ 94.839215][ T4754] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 95.707579][ T4763] FAULT_INJECTION: forcing a failure. [ 95.707579][ T4763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.821014][ T4763] CPU: 1 PID: 4763 Comm: syz.0.185 Not tainted syzkaller #0 [ 95.828361][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.838442][ T4763] Call Trace: [ 95.841752][ T4763] [ 95.844701][ T4763] dump_stack_lvl+0x188/0x250 [ 95.849407][ T4763] ? show_regs_print_info+0x20/0x20 [ 95.854632][ T4763] ? load_image+0x410/0x410 [ 95.859161][ T4763] ? __lock_acquire+0x7b50/0x7b50 [ 95.864227][ T4763] ? mon_bin_open+0x196/0x500 [ 95.868926][ T4763] ? chrdev_open+0x585/0x5f0 [ 95.873540][ T4763] should_fail+0x383/0x4b0 [ 95.877977][ T4763] prepare_alloc_pages+0x1e3/0x5b0 [ 95.883120][ T4763] __alloc_pages+0x11b/0x480 [ 95.887728][ T4763] ? zone_statistics+0x170/0x170 [ 95.892697][ T4763] ? alloc_pages+0x452/0x560 [ 95.897309][ T4763] get_zeroed_page+0x13/0x30 [ 95.901915][ T4763] mon_bin_open+0x225/0x500 [ 95.906446][ T4763] chrdev_open+0x585/0x5f0 [ 95.910883][ T4763] ? cd_forget+0x160/0x160 [ 95.915322][ T4763] ? fsnotify_perm+0x3a7/0x560 [ 95.920110][ T4763] ? cd_forget+0x160/0x160 [ 95.924544][ T4763] do_dentry_open+0x7f7/0xf90 [ 95.929243][ T4763] ? vfs_open+0x2b/0x80 [ 95.933425][ T4763] path_openat+0x2718/0x2fb0 [ 95.938067][ T4763] ? __kasan_slab_alloc+0xa9/0xc0 [ 95.943120][ T4763] ? do_filp_open+0x400/0x400 [ 95.947831][ T4763] do_filp_open+0x1df/0x400 [ 95.952355][ T4763] ? vfs_tmpfile+0x300/0x300 [ 95.956987][ T4763] ? _raw_spin_unlock+0x24/0x40 [ 95.961858][ T4763] ? alloc_fd+0x59e/0x650 [ 95.966272][ T4763] do_sys_openat2+0x14b/0x500 [ 95.970962][ T4763] ? __lock_acquire+0x7b50/0x7b50 [ 95.976007][ T4763] ? do_sys_open+0xe0/0xe0 [ 95.980460][ T4763] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.986463][ T4763] ? lock_chain_count+0x20/0x20 [ 95.991341][ T4763] __x64_sys_openat+0x135/0x160 [ 95.996210][ T4763] do_syscall_64+0x4c/0xa0 [ 96.000643][ T4763] ? clear_bhb_loop+0x30/0x80 [ 96.005334][ T4763] ? clear_bhb_loop+0x30/0x80 [ 96.010027][ T4763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.015937][ T4763] RIP: 0033:0x7fc3fe36198e [ 96.020375][ T4763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.040083][ T4763] RSP: 002b:00007fc3fc5f8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.048515][ T4763] RAX: ffffffffffffffda RBX: 00007fc3fc5f96c0 RCX: 00007fc3fe36198e [ 96.056500][ T4763] RDX: 0000000000008001 RSI: 00007fc3fc5f8c00 RDI: ffffffffffffff9c [ 96.064484][ T4763] RBP: 00007fc3fc5f8c00 R08: 0000000000000000 R09: 0000000000000000 [ 96.072467][ T4763] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 96.080454][ T4763] R13: 00007fc3fe629038 R14: 00007fc3fe628fa0 R15: 00007ffe44869848 [ 96.088471][ T4763] [ 96.541665][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880624ba400: rx timeout, send abort [ 96.575126][ C0] sched: RT throttling activated [ 96.590781][ T4786] netlink: 'syz.1.194': attribute type 83 has an invalid length. [ 97.042239][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880624c7000: rx timeout, send abort [ 97.051508][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880624ba400: abort rx timeout. Force session deactivation [ 97.662019][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880624c7000: abort rx timeout. Force session deactivation [ 97.889766][ T4802] loop4: detected capacity change from 0 to 512 [ 98.051709][ T4802] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 98.105481][ T4802] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.200: corrupted inode contents [ 98.186696][ T4802] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #11: comm syz.4.200: mark_inode_dirty error [ 98.200795][ T4812] loop3: detected capacity change from 0 to 512 [ 98.203790][ T4802] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.200: invalid indirect mapped block 1 (level 1) [ 98.223856][ T4802] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.200: corrupted inode contents [ 98.250433][ T4802] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 98.275412][ T4802] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #11: comm syz.4.200: corrupted inode contents [ 98.283163][ T4812] EXT4-fs (loop3): Unrecognized mount option "defcontext=root" or missing value [ 98.290577][ T4802] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.200: mark_inode_dirty error [ 98.312221][ T4802] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 98.326113][ T4802] EXT4-fs (loop4): 1 truncate cleaned up [ 98.332440][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.425318][ T4802] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: none. [ 98.778633][ T4819] FAULT_INJECTION: forcing a failure. [ 98.778633][ T4819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.885870][ T4819] CPU: 1 PID: 4819 Comm: syz.3.208 Not tainted syzkaller #0 [ 98.893226][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.903404][ T4819] Call Trace: [ 98.906710][ T4819] [ 98.909667][ T4819] dump_stack_lvl+0x188/0x250 [ 98.914374][ T4819] ? show_regs_print_info+0x20/0x20 [ 98.919621][ T4819] ? load_image+0x410/0x410 [ 98.924166][ T4819] ? __lock_acquire+0x7b50/0x7b50 [ 98.929219][ T4819] ? mon_bin_open+0x196/0x500 [ 98.933921][ T4819] ? chrdev_open+0x585/0x5f0 [ 98.938552][ T4819] should_fail+0x383/0x4b0 [ 98.943097][ T4819] prepare_alloc_pages+0x1e3/0x5b0 [ 98.948408][ T4819] __alloc_pages+0x11b/0x480 [ 98.953028][ T4819] ? zone_statistics+0x170/0x170 [ 98.958005][ T4819] ? alloc_pages+0x452/0x560 [ 98.962628][ T4819] get_zeroed_page+0x13/0x30 [ 98.967246][ T4819] mon_bin_open+0x225/0x500 [ 98.971790][ T4819] chrdev_open+0x585/0x5f0 [ 98.976240][ T4819] ? cd_forget+0x160/0x160 [ 98.980696][ T4819] ? fsnotify_perm+0x3a7/0x560 [ 98.985490][ T4819] ? cd_forget+0x160/0x160 [ 98.989941][ T4819] do_dentry_open+0x7f7/0xf90 [ 98.994699][ T4819] ? vfs_open+0x2b/0x80 [ 98.998892][ T4819] path_openat+0x2718/0x2fb0 [ 99.003589][ T4819] ? __kasan_slab_alloc+0xa9/0xc0 [ 99.008656][ T4819] ? do_filp_open+0x400/0x400 [ 99.013380][ T4819] do_filp_open+0x1df/0x400 [ 99.017919][ T4819] ? vfs_tmpfile+0x300/0x300 [ 99.022578][ T4819] ? _raw_spin_unlock+0x24/0x40 [ 99.027456][ T4819] ? alloc_fd+0x59e/0x650 [ 99.031824][ T4819] do_sys_openat2+0x14b/0x500 [ 99.036537][ T4819] ? __lock_acquire+0x7b50/0x7b50 [ 99.042347][ T4819] ? do_sys_open+0xe0/0xe0 [ 99.042390][ T4819] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.042418][ T4819] ? lock_chain_count+0x20/0x20 [ 99.042445][ T4819] __x64_sys_openat+0x135/0x160 [ 99.042467][ T4819] do_syscall_64+0x4c/0xa0 [ 99.042485][ T4819] ? clear_bhb_loop+0x30/0x80 [ 99.042503][ T4819] ? clear_bhb_loop+0x30/0x80 [ 99.042524][ T4819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.042543][ T4819] RIP: 0033:0x7ff7954f598e [ 99.042562][ T4819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.042577][ T4819] RSP: 002b:00007ff79378cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.042601][ T4819] RAX: ffffffffffffffda RBX: 00007ff79378d6c0 RCX: 00007ff7954f598e [ 99.042614][ T4819] RDX: 0000000000008001 RSI: 00007ff79378cc00 RDI: ffffffffffffff9c [ 99.042627][ T4819] RBP: 00007ff79378cc00 R08: 0000000000000000 R09: 0000000000000000 [ 99.042638][ T4819] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 99.042651][ T4819] R13: 00007ff7957bd038 R14: 00007ff7957bcfa0 R15: 00007ffc874c5fc8 [ 99.042678][ T4819] [ 99.176275][ T4814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.290064][ T4814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.345663][ T4814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.404943][ T4814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.309595][ T4866] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 101.355396][ T4866] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.222'. [ 103.845873][ T4888] Bluetooth: hci0: command 0x0409 tx timeout [ 105.106363][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 105.544306][ T4915] loop3: detected capacity change from 0 to 256 [ 105.947103][ T4923] Dead loop on virtual device ip6_vti0, fix it urgently! [ 105.966694][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.973996][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.998839][ T4859] device bridge_slave_0 entered promiscuous mode [ 106.035423][ T4828] Bluetooth: hci0: command 0x041b tx timeout [ 106.054810][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.074581][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.125455][ T4859] device bridge_slave_1 entered promiscuous mode [ 106.361814][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.393437][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.667933][ T4859] team0: Port device team_slave_0 added [ 107.800244][ T4859] team0: Port device team_slave_1 added [ 107.953892][ T4814] device hsr_slave_0 left promiscuous mode [ 107.972170][ T4814] device hsr_slave_1 left promiscuous mode [ 108.007918][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.015839][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.026453][ T4814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.035636][ T4814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.082476][ T4814] device bridge_slave_1 left promiscuous mode [ 108.096566][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.115820][ T4828] Bluetooth: hci0: command 0x040f tx timeout [ 108.199280][ T4814] device bridge_slave_0 left promiscuous mode [ 108.235524][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.384561][ T4814] device veth1_macvtap left promiscuous mode [ 108.425361][ T4814] device veth0_macvtap left promiscuous mode [ 108.473257][ T4814] device veth1_vlan left promiscuous mode [ 108.510155][ T4814] device veth0_vlan left promiscuous mode [ 110.396432][ T4814] team0 (unregistering): Port device team_slave_1 removed [ 110.443994][ T4834] Bluetooth: hci0: command 0x0419 tx timeout [ 110.454583][ T4814] team0 (unregistering): Port device team_slave_0 removed [ 110.590307][ T4814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.641710][ T4814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.814213][ T4814] bond0 (unregistering): Released all slaves [ 111.920984][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.929671][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.955823][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.967082][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.035450][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.043161][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.183115][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.243102][ T5004] netlink: 144 bytes leftover after parsing attributes in process `syz.0.253'. [ 112.727637][ T5011] netlink: 30 bytes leftover after parsing attributes in process `syz.3.254'. [ 112.749573][ T4859] device hsr_slave_0 entered promiscuous mode [ 112.812476][ T4859] device hsr_slave_1 entered promiscuous mode [ 112.846596][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.854301][ T4859] Cannot create hsr debugfs directory [ 114.070538][ T5041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 114.199387][ T5043] loop0: detected capacity change from 0 to 256 [ 114.577237][ T4859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.644675][ T4859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.717803][ T4859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.759090][ T4859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.179838][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.258464][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.286530][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.296985][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.325620][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.350151][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.386144][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.393264][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.452917][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.495594][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.518463][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.573892][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.581059][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.619933][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.648630][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.713899][ T4859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.765177][ T4859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.828755][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.846822][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.892150][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.929002][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.945340][ T4835] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.992254][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.021395][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.046161][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.064981][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.087424][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.114144][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.185253][ T4890] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.475257][ T4890] usb 5-1: Using ep0 maxpacket: 8 [ 117.476135][ T4835] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 117.510235][ T4835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.525302][ T4835] usb 4-1: Product: syz [ 117.542025][ T4835] usb 4-1: Manufacturer: syz [ 117.568416][ T4835] usb 4-1: SerialNumber: syz [ 117.574050][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.585982][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.607886][ T4835] usb 4-1: config 0 descriptor?? [ 117.620224][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.660052][ T4835] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 117.705503][ T4890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.797592][ T4890] usb 5-1: config 6 has an invalid interface number: 172 but max is 0 [ 117.812224][ T4890] usb 5-1: config 6 has no interface number 0 [ 117.825188][ T4890] usb 5-1: config 6 interface 172 has no altsetting 0 [ 117.955651][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.005396][ T4835] gspca_m5602: Failed to find a sensor [ 118.011043][ T4835] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 118.053758][ T4835] usb 4-1: USB disconnect, device number 2 [ 118.138533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.150496][ T4890] usb 5-1: string descriptor 0 read error: -22 [ 118.161223][ T4890] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=c0.1a [ 118.181780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.190262][ T4890] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3 [ 118.241888][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.266124][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.315292][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.326285][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.334303][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.343351][ T7] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 118.363535][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.376776][ T4859] device veth0_vlan entered promiscuous mode [ 118.408953][ T4890] usb_8dev 5-1:6.172 can0: sending command message failed [ 118.422483][ T4859] device veth1_vlan entered promiscuous mode [ 118.440470][ T4890] usb_8dev 5-1:6.172 can0: can't get firmware version [ 118.524882][ T5097] udc-core: couldn't find an available UDC or it's busy [ 118.535228][ T5097] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.554367][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.575379][ T7] rtsx_usb: probe of 3-1:1.0 failed with error -22 [ 118.582353][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.600223][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.619732][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.646819][ T4890] usb_8dev: probe of 5-1:6.172 failed with error -22 [ 118.648542][ T4828] usb 3-1: USB disconnect, device number 2 [ 118.655584][ T4859] device veth0_macvtap entered promiscuous mode [ 118.686028][ T4835] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.711174][ T4859] device veth1_macvtap entered promiscuous mode [ 118.803047][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.834013][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.862579][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.922906][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.930076][ T4835] usb 4-1: Using ep0 maxpacket: 8 [ 118.949236][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.974139][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.987824][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.991491][ T4828] logitech-hidpp-device 0003:046D:C082.0001: Device not connected [ 119.001062][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.025524][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.073584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.092266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.108177][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.126410][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.142049][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.154453][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.186578][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.227652][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.255446][ T4835] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 119.255748][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.270440][ T4835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.275793][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.283855][ T4835] usb 4-1: Product: syz [ 119.296329][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.309503][ T4835] usb 4-1: Manufacturer: syz [ 119.314433][ T4835] usb 4-1: SerialNumber: syz [ 119.322418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.331581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.361031][ T4835] usb 4-1: config 0 descriptor?? [ 119.379367][ T4859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.410784][ T4835] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 119.414766][ T4859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.446772][ T4859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.463493][ T4859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.062768][ T4262] usb 5-1: USB disconnect, device number 2 [ 120.193713][ T5159] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.704352][ T5167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 120.711325][ T5167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 120.725681][ T4835] gspca_m5602: Failed to find a sensor [ 120.731191][ T4835] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 120.741518][ T5171] loop3: detected capacity change from 0 to 256 [ 120.765452][ T4835] usb 4-1: USB disconnect, device number 3 [ 120.775825][ T5167] vhci_hcd vhci_hcd.0: Device attached [ 120.827669][ T5168] vhci_hcd: connection closed [ 120.830009][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.830697][ T4694] vhci_hcd: stop threads [ 120.834736][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.834969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.864561][ T4694] vhci_hcd: release socket [ 120.879408][ T4694] vhci_hcd: disconnect device [ 121.022006][ T5175] i2c i2c-0: Invalid block read size 255 [ 121.023050][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.056329][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.074356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.095226][ T4835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.335363][ T4835] usb 5-1: Using ep0 maxpacket: 32 [ 122.377129][ T5227] misc userio: The device must be registered before sending interrupts [ 122.403517][ T5226] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.474208][ T5226] [ 122.476596][ T5226] ====================================================== [ 122.483626][ T5226] WARNING: possible circular locking dependency detected [ 122.490750][ T5226] syzkaller #0 Not tainted [ 122.495185][ T5226] ------------------------------------------------------ [ 122.502222][ T5226] syz.2.302/5226 is trying to acquire lock: [ 122.508127][ T5226] ffff888075e5aad8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 122.519559][ T5226] [ 122.519559][ T5226] but task is already holding lock: [ 122.526938][ T5226] ffff888075e58c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 122.535936][ T5226] [ 122.535936][ T5226] which lock already depends on the new lock. [ 122.535936][ T5226] [ 122.546350][ T5226] [ 122.546350][ T5226] the existing dependency chain (in reverse order) is: [ 122.555378][ T5226] [ 122.555378][ T5226] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 122.563139][ T5226] lock_sock_nested+0x44/0x100 [ 122.568443][ T5226] smc_listen_out+0xd4/0x3c0 [ 122.573566][ T5226] smc_listen_work+0x52a/0xd10 [ 122.578862][ T5226] process_one_work+0x867/0xff0 [ 122.584250][ T5226] worker_thread+0xad7/0x12a0 [ 122.589463][ T5226] kthread+0x42e/0x520 [ 122.594058][ T5226] ret_from_fork+0x1f/0x30 [ 122.599011][ T5226] [ 122.599011][ T5226] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 122.609187][ T5226] __lock_acquire+0x2c66/0x7b50 [ 122.614573][ T5226] lock_acquire+0x19e/0x400 [ 122.619608][ T5226] __flush_work+0x116/0x210 [ 122.624643][ T5226] __cancel_work_timer+0x3f4/0x560 [ 122.630289][ T5226] smc_clcsock_release+0x5c/0xe0 [ 122.635858][ T5226] __smc_release+0x644/0x7b0 [ 122.640983][ T5226] smc_close_non_accepted+0xd1/0x1f0 [ 122.646800][ T5226] smc_close_active+0xae2/0xea0 [ 122.652186][ T5226] __smc_release+0x9c/0x7b0 [ 122.657231][ T5226] smc_release+0x2c1/0x520 [ 122.662177][ T5226] sock_close+0xbf/0x210 [ 122.666948][ T5226] __fput+0x212/0x8c0 [ 122.671461][ T5226] task_work_run+0x125/0x1a0 [ 122.676583][ T5226] exit_to_user_mode_loop+0x10f/0x130 [ 122.682482][ T5226] exit_to_user_mode_prepare+0xee/0x180 [ 122.688557][ T5226] syscall_exit_to_user_mode+0x16/0x40 [ 122.694533][ T5226] do_syscall_64+0x58/0xa0 [ 122.699473][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.705886][ T5226] [ 122.705886][ T5226] other info that might help us debug this: [ 122.705886][ T5226] [ 122.716191][ T5226] Possible unsafe locking scenario: [ 122.716191][ T5226] [ 122.723642][ T5226] CPU0 CPU1 [ 122.729001][ T5226] ---- ---- [ 122.734389][ T5226] lock(sk_lock-AF_SMC/1); [ 122.738894][ T5226] lock((work_completion)(&new_smc->smc_listen_work)); [ 122.748340][ T5226] lock(sk_lock-AF_SMC/1); [ 122.755363][ T5226] lock((work_completion)(&new_smc->smc_listen_work)); [ 122.762291][ T5226] [ 122.762291][ T5226] *** DEADLOCK *** [ 122.762291][ T5226] [ 122.770423][ T5226] 2 locks held by syz.2.302/5226: [ 122.775443][ T5226] #0: ffff888060b11410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 122.785627][ T5226] #1: ffff888075e58c60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 122.795019][ T5226] [ 122.795019][ T5226] stack backtrace: [ 122.800900][ T5226] CPU: 0 PID: 5226 Comm: syz.2.302 Not tainted syzkaller #0 [ 122.808176][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.818223][ T5226] Call Trace: [ 122.821501][ T5226] [ 122.824426][ T5226] dump_stack_lvl+0x188/0x250 [ 122.829100][ T5226] ? load_image+0x410/0x410 [ 122.833599][ T5226] ? show_regs_print_info+0x20/0x20 [ 122.838794][ T5226] ? print_circular_bug+0x12b/0x1a0 [ 122.843991][ T5226] check_noncircular+0x296/0x330 [ 122.848923][ T5226] ? look_up_lock_class+0x71/0x110 [ 122.854034][ T5226] ? add_chain_block+0x9b0/0x9b0 [ 122.858964][ T5226] ? lockdep_lock+0xf1/0x1f0 [ 122.863554][ T5226] ? mark_lock+0x94/0x320 [ 122.867874][ T5226] ? _find_first_zero_bit+0xd1/0xf0 [ 122.873066][ T5226] __lock_acquire+0x2c66/0x7b50 [ 122.877916][ T5226] ? hlock_conflict+0x59/0x1f0 [ 122.882682][ T5226] ? __bfs+0x27a/0x560 [ 122.886745][ T5226] ? verify_lock_unused+0x140/0x140 [ 122.891937][ T5226] ? mark_lock+0x94/0x320 [ 122.896262][ T5226] ? __lock_acquire+0x13dc/0x7b50 [ 122.901284][ T5226] ? lockdep_unlock+0x143/0x2e0 [ 122.906130][ T5226] lock_acquire+0x19e/0x400 [ 122.910740][ T5226] ? __flush_work+0xfa/0x210 [ 122.915330][ T5226] ? read_lock_is_recursive+0x10/0x10 [ 122.920715][ T5226] __flush_work+0x116/0x210 [ 122.925211][ T5226] ? __flush_work+0xfa/0x210 [ 122.929800][ T5226] ? flush_work+0x20/0x20 [ 122.934122][ T5226] ? try_to_grab_pending+0xfb/0x820 [ 122.939313][ T5226] ? mark_lock+0x94/0x320 [ 122.943637][ T5226] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.949619][ T5226] ? lock_chain_count+0x20/0x20 [ 122.954477][ T5226] ? mark_lock+0x94/0x320 [ 122.958810][ T5226] ? __cancel_work_timer+0x36a/0x560 [ 122.964094][ T5226] __cancel_work_timer+0x3f4/0x560 [ 122.969203][ T5226] ? cancel_work_sync+0x20/0x20 [ 122.974056][ T5226] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.979423][ T5226] ? lockdep_hardirqs_on+0x94/0x140 [ 122.984713][ T5226] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.990081][ T5226] ? _local_bh_enable+0xa0/0xa0 [ 122.995015][ T5226] smc_clcsock_release+0x5c/0xe0 [ 122.999949][ T5226] __smc_release+0x644/0x7b0 [ 123.004553][ T5226] smc_close_non_accepted+0xd1/0x1f0 [ 123.009842][ T5226] smc_close_active+0xae2/0xea0 [ 123.014706][ T5226] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 123.020341][ T5226] __smc_release+0x9c/0x7b0 [ 123.024855][ T5226] smc_release+0x2c1/0x520 [ 123.029278][ T5226] sock_close+0xbf/0x210 [ 123.033526][ T5226] ? sock_mmap+0x90/0x90 [ 123.037768][ T5226] __fput+0x212/0x8c0 [ 123.041758][ T5226] task_work_run+0x125/0x1a0 [ 123.046350][ T5226] exit_to_user_mode_loop+0x10f/0x130 [ 123.051719][ T5226] exit_to_user_mode_prepare+0xee/0x180 [ 123.057258][ T5226] syscall_exit_to_user_mode+0x16/0x40 [ 123.062726][ T5226] do_syscall_64+0x58/0xa0 [ 123.067136][ T5226] ? clear_bhb_loop+0x30/0x80 [ 123.071811][ T5226] ? clear_bhb_loop+0x30/0x80 [ 123.076486][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.082381][ T5226] RIP: 0033:0x7f89e1f07159 [ 123.086801][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.106401][ T5226] RSP: 002b:00007f89e015f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 123.114813][ T5226] RAX: 0000000000000000 RBX: 00007f89e218efa0 RCX: 00007f89e1f07159 [ 123.122784][ T5226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.130773][ T5226] RBP: 00007f89e1f9e06b R08: 0000000000000000 R09: 0000000000000000 [ 123.138747][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.147152][ T5226] R13: 00007f89e218f038 R14: 00007f89e218efa0 R15: 00007ffec8be00e8 [ 123.155124][ T5226] [ 123.166407][ T4835] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.174528][ T4835] usb 5-1: config 0 has no interface number 0 [ 123.365226][ T4835] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.381801][ T4835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.397850][ T4835] usb 5-1: Product: syz [ 123.405450][ T4835] usb 5-1: Manufacturer: syz [ 123.414584][ T4835] usb 5-1: SerialNumber: syz [ 123.429104][ T4835] usb 5-1: config 0 descriptor?? [ 123.475882][ T4835] smsc95xx v2.0.0 [ 123.695323][ T4835] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 123.705493][ T4835] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 123.714013][ T4835] usb 5-1: USB disconnect, device number 3